cavuno-board-seo
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill instructions involve ingesting data from external API sources (job listings, blog posts, salary details) to generate JSON-LD structured data, creating an indirect prompt injection surface.
- Ingestion points: Data is retrieved from the
boardobject using methods likeboard.jobs.retrieve,board.blog.posts.retrieve, andboard.salaries.titles.retrieveacrossJOB_AND_BREADCRUMBS.md,BLOG.md, andSALARY.md. - Boundary markers: The provided implementation snippets do not include explicit boundary markers or "ignore embedded instructions" warnings when processing these external data objects.
- Capability inventory: The skill is designed to generate content for
application/ld+jsonscript tags and HTML head metadata (title, description, Open Graph tags). - Sanitization: The skill relies on the
@cavuno/board/seoSDK builders to correctly serialize and sanitize external data before it is emitted into the page's HTML context.
Audit Metadata